Hosts with non bound ports are not accessible through VPN about docker-mac-network HOT 6 CLOSED

Thanks for the feedback, I'll let you know what I end up doing. And sounds good on closing this!

from docker-mac-network.

I found a solution for this but am working on making it less manual and more elegant... Had to make some tweaks to the docker vm's iptables. Will share the solution when it's tidied up.

from docker-mac-network.

@phutchins For this you can simply expose each service on a random port. The service will still be reachable on the original port at the internal container IP. The random port only applies to port forwarding on the host interface. The port within the container is not affected.

For example, if you expose port 80 with ports: ["80"], it will be assigned a random port on your macOS localhost, but you can still reach this service at something like172.20.0.10:80 through the VPN and from other containers within the same Docker network.

from docker-mac-network.

@wojas awesome! This is a much cleaner solution and is built into docker... Didn't realize that exposing a random port would create the iptables rules so thats perfect. I've tried it out and it works quite nicely.

I'd like to build this into a generic opensource framework for project development... One of the other things that I'd like to accomplish with it is exposing hosts over the VPN via DNS by their hostname. Have you used any of the existing solutions for DNS in docker/docker-compose by chance?

from docker-mac-network.

@phutchins I have not used any third party solution to also expose DNS on the macOS host (not aware of any), but it is an interesting idea.

One possible approach would be to use PowerDNS recursor or dnsdist's Lua support to resolve against Docker APIs for say a .docker TLD (and hope that this TLD won't get registered in the future), while passing through normal queries.

This can only work with one VPN connection, or if you use a special DNS container just for this.

from docker-mac-network.

I'm closing this issue, as it works out of the box with exposed ports.

from docker-mac-network.